
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json)
Hash identifier: 31ouT273yppYETRVTVoB07XCIonMqo33KaDshgWnMu0=
Subject key identifier: 36:8A:ED:14:A9:6F:EE:35:B5:6E:92:38:57:43:53:E9:11:FC:00:02
Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49
Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949
Certificate serial: 5BD2BCF58160A374C23BC037517AFAECC343B9B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
Manifest number: 0223
Signing time: Sun 01 Mar 2026 21:31:55 +0000
Manifest this update: Sun 01 Mar 2026 21:26:55 +0000
Manifest next update: Thu 05 Mar 2026 05:41:55 +0000
Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: RJK+mCq5bhkGWTeeGhWgnNbwAM5lM5fwmMEtjXHLto8=)
2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=)
3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl
rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d2:bc:f5:81:60:a3:74:c2:3b:c0:37:51:7a:fa:ec:c3:43:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949
Validity
Not Before: Mar 1 21:26:55 2026 GMT
Not After : Mar 5 05:41:55 2026 GMT
Subject: CN=368AED14A96FEE35B56E9238574353E911FC0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:c8:da:31:c1:c2:a7:6e:94:73:94:33:9e:
5e:92:28:c1:cb:ea:72:e6:3b:63:fd:20:bc:53:cf:
de:e8:de:99:05:50:66:e2:f7:ba:0e:e9:25:4c:3c:
7f:a6:76:74:ce:07:91:4f:ac:be:e1:ae:39:20:98:
9a:f9:07:89:8e:a5:b9:d2:3f:d2:d5:8c:2d:7a:9b:
03:1d:4e:52:ae:ed:1d:70:47:5c:29:a8:65:ea:ed:
09:8c:0e:fb:e8:77:de:1d:83:cd:32:1d:a8:5e:9e:
c0:e8:83:fc:f3:de:50:08:ca:9c:ce:de:d6:ba:a5:
81:17:f8:7f:32:95:63:50:8d:af:c5:6b:a4:b9:1c:
b4:21:79:5d:57:4f:85:88:71:5b:af:96:7e:17:25:
91:d5:1b:ad:eb:7f:82:95:4f:e2:85:f4:c4:51:a7:
d2:10:c8:c9:e9:2e:4b:21:c3:a8:a0:73:86:f6:40:
d3:fa:8f:7a:f1:f6:81:ce:36:0c:2e:06:8d:38:20:
4c:c6:73:e1:fd:a6:bb:b0:e9:33:b3:01:8f:38:e4:
d9:77:0e:47:69:ac:3b:4a:d8:4f:03:1c:b7:c4:0c:
5c:82:dd:07:3f:dc:d8:f6:e3:19:64:ca:eb:12:5c:
19:4c:47:26:6b:ab:b6:40:2e:26:07:52:49:d3:93:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:ED:14:A9:6F:EE:35:B5:6E:92:38:57:43:53:E9:11:FC:00:02
X509v3 Authority Key Identifier:
keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:24:54:5d:d5:4c:c6:ce:ec:5b:cc:49:42:0e:93:26:0d:cc:
24:c9:e8:1d:9b:4a:59:21:ec:ce:47:7a:63:ce:ac:ad:5d:14:
55:b9:bf:15:f1:9a:86:d7:1c:ab:38:6b:9b:a8:80:79:d4:3b:
49:d8:63:bc:d4:bb:1f:35:fe:71:53:5c:7a:2a:80:8e:47:01:
04:de:74:13:b7:8b:20:5c:b4:6a:d7:d2:a7:61:19:21:74:14:
29:05:46:10:f3:11:de:81:76:79:da:6f:f8:a4:b2:47:be:91:
ac:40:d3:18:79:16:bb:d1:45:f8:e6:4e:c2:6b:27:1b:79:8b:
34:62:9f:6f:06:e4:cc:92:7d:5c:a3:36:ef:ab:93:26:1f:93:
aa:23:c3:2a:1f:2e:82:58:4d:ad:09:84:4b:5d:1e:22:df:a1:
02:1f:0d:0d:d7:2a:e7:fc:cc:a7:19:05:5e:c1:d6:81:c3:98:
14:f8:bd:be:a0:a8:d6:03:1b:91:be:d8:66:30:a5:52:15:f2:
71:28:41:0d:d0:74:57:5d:6d:d4:01:6c:05:6e:41:17:47:76:
b9:67:f2:a0:f8:b2:c4:10:74:00:ed:a4:23:cf:0a:03:90:94:
24:8c:2e:42:a8:13:1a:04:00:ae:14:7a:02:fa:84:67:f1:7b:
d9:2e:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:58 2026 by rpki-client